Only zeroize buffer if the buffer length is non-zero
diff --git a/library/psa_crypto.c b/library/psa_crypto.c
index 0864031..5bf4f99 100644
--- a/library/psa_crypto.c
+++ b/library/psa_crypto.c
@@ -1235,7 +1235,8 @@
     status = psa_import_key( target, source->type, buffer, length );
 
 exit:
-    mbedtls_platform_zeroize( buffer, buffer_size );
+    if( buffer_size != 0 )
+        mbedtls_platform_zeroize( buffer, buffer_size );
     mbedtls_free( buffer );
     return( status );
 }